MNHO-043 DATASHEET Intel J1900 4 LAN HD Dual Display 4G Fanless Firewall Router

MNHO-043 DATASHEET Intel J1900 4 LAN HD Dual Display 4G Fanless Firewall Router https://www.pondesk.com/product/MNHO-043

Features ● Small Security Gateway, Firewall Router, Mini Server ● Intel Celeron® J1900 Quad Core Processor ● 4 Threads, 2M Cache, up to 2.42 GHz ● Four Intel I211-AT Gigabit Ethernet ● Dual Display, USB 2.0, USB3.0 ● Support WiFi, 3G/4G WWAN Networks (optional) ● Support up to 8GB DDR3L Memory ● Support Dual Storage (mSATA SSD & 2.5" SATA SSD/HDD) ● Intel® HD Graphics ● Aluminium Alloy Dustproof Fanless ● Energy Efficient 10W (idle) Low Power Consumption ● Ready for IoT - Simply Connected Using 3G/4G LTE via Mini PCIe ● Easy Installation & VESA Mounting Capabilities ● Support Windows/Linux/Unix/Firewalls etc. ● Can be configured as a Firewall, LAN/WAN Router, VPN, DNS Server, DHCP Server ● Perfect for Security Gateway, Server, VPN and Firewall such as pfSense, Untangle, Sophos, Smoothwall, ClearOS, m0n0wall etc.

Specifications Dimensions

Processor Advanced Technologies Intel Celeron® Processor J1900 Intel® Virtualization Technology (VT-x) 4 Core, 4 Threads Intel® 64 2M Cache, 2.42 GHz Enhanced Intel SpeedStep® Technology

Memory Security & Reliability Support up to 8GB Execute Disable Bit W DDR3L SODIMM 1.35V Low Voltage non-ECC Memory Onboard I/O One Memory Slot 1 x SYS FAN (1*3pin) 1 x DT-126RP-02P Terminal Block Storage 1 x CTR1 (2*5pin) Support 1 x mSATA SSD 1 x SATA2.0 L H Support 1 x 2.5" SATA SSD/HDD 1 x BAT1 CMOS (1*2pin) 1 x mini PCIe (For WiFi/WWAN) LAN 1 x mSATA (for SSD) 134mm x 126mm x 40.6mm (L*W*H) Four Gigabit Ethernet Ports 1 x 6pin SIM connector Intel I211-AT Gigabit Ethernet Controller Power & Working Environment Expansion Slots Adapter Input: AC 100-240V ~ 50-60Hz One mSATA Slot (For SSD) Adapter Output: DC 12V 5A Package One mini PCIe Slot (For WiFi/WWAN System Input: DC 12V Module) Consumption: 9W~14W MODEL # MNHO-043 ■ 1 x Mini Server Operating Temperature: -10°C ~ 55°C P/N: MO43J19ND4L ■ 1 x Power Adapter I/O Interfaces Storage Temperature: -20°C ~ 70°C ■ 1 x Power Cord 4 x Gigabit Ethernet Humidity: 5% - 95% Non-Condensing 1 x VGA 1 x HDMI Others 1 x USB 2.0, 1 x USB 3.0 BIOS: AMI Optional Chassis Material: Aluminium Alloy 3G/4G/WiFi 802.11 b/g/n WiFi (PCIe Module) Graphics Cooling: Completely Fanless Intel HD Graphics 802.11 AC WiFi (PCIe Module) Weight: 0.5 KG 3G (up to 14.4 Mbps) Intel® Quick Sync Video Package: 1 x Mini PC 4G (up to 150 Mbps) 1 x Power Adopter 3G (14.4 Mbps) + USB N WiFi OS 1 x Cord 4G (150 Mbps) + USB N WiFi Support Windows/Windows Server/ Memory 2GB/4GB/8GB DDR3L Memory Linux/Unix/Firewalls pfSense, Untangle, mSATA SSD 16GB/32GB/64GB/120GB/240GB/480GB mSATA SSD 2.5" SATA HDD 500GB/1TB/2TB 2.5" SATA HDD Debian, Sophos, FreeBSD, 2.5" SATA SSD 16GB/32GB/64GB/120GB/240GB/480GB 2.5" SATA SSD Smoothwall, Endian, ClearOS, m0n0wall etc.

[email protected] * All specifications and photos are subject to change without notice. United Kingdom Registered names and trademarks are the copyright and property of their respective owners. Hardware Performance MNHO-043

This section describes the real-world performance of network firewall router hardware with respect to multiple Firewall/Routing/All-In-One OS. There are many factors which influence the performance of firewall/routing etc.

1. Throughput 2. Features/Applications 3. Version of OS 4. Network Card Chipset 5. Number of Users

1. Throughput Traffic Load is very major part of performance notes, if there is less traffic then less load on device CPU & RAM with better performance. More traffic needs more processing and can reduce the through of appliance.

2. Features/Applications Most of features do not factor into hardware performance though a few have significant impact on hardware utilization.

VPN: Heavy use of any of the VPN services included in pfSense, Untangle & Sophos etc. will increase CPU requirements. Encrypting and decrypting traffic is CPU intensive. The number of connections is much less of a concern than the throughput required. - 266 MHz CPU will max out at around 4 Mbps of IPsec throughput - 500 MHz CPU can push 10-15 Mbps of IPsec - i7 CPU or Xeon new generation support 100 Mbps of IPsec traffic Supported encryption cards, such as several from Hifn, are capable of significantly reducing CPU requirements.

Squid – Squidguard: Outgoing traffic control through proxy both packages rely heavily both the CPU and disk writes. It is therefore strongly recommended to use with the Entry level and the use of AUTM and AUTM2 with DOM devices. For this kind of work is strongly recommended to use AUTM, AUTM2 and microcluster with SSD or classics disks. However, it is also possible the optimized use with only the squid package on the entry level as long as you turn off any kind of writing on the disk media and strong expense of performance.

Captive Portal: While the primary concern is typically throughput, environments with hundreds of simultaneous captive portal users (of which there are many) will require slightly more CPU power than recommended above.

Large State Tables: State table entries require about 1 KB of RAM each. The default state table, when full at 10,000 entries, takes up a little less than 10 MB RAM. For large environments requiring state tables with hundreds of thousands of connections, ensure adequate RAM is available.

Packages: Some of the packages increase RAM requirements significantly. Snort and ntop are two that should not be installed on a system with less than 512 MB RAM.

3. Version of OS We must emphasize the difference between the two types of installations that you can do with pfSense and Untangle etc. on the different devices - The embedded solution (firewall Entry Level) does NOT allow the writing of log files on the memory (CF or DOM) and in any case, it is strongly discouraged. This version is not possible to install some additional packages of pfSense® and Untangle. - The solution that installs on your hard disk (usually on the UTM Appliance solutions or above) has the ability to save logs in it. On this version, you can install all additional packages provided for pfSense® and Untangle.

4. Network Card Chipset The choice of a network card is essential for anyone who is planning a system for medium / large dimensions. - The Realtek chipset is less powerful than Intel Chipset and is mainly suitable for workloads less intense. However, for a company that does not require high throughputs. - The Intel chipset, on the other hand, offers better performances in heavy traffic: it offers several advanced features such as queue management and, from the 2.2 version of pfSense, it also improved the multi-core support. This means a higher throughput and a reduced load on the CPU.

5. Number Of Users Firewall performance also dependent of number of users behind it, more users more state table entries and more hardware resources required.

Below mentioned are few real-world stress tests performed with different firewall OS on standard network firewall router box hardware with the following configurations.

CPU: Intel Celeron® Processor J1900 RAM: 8GB DDR3L Memory SSD: 16GB mSATA3 SSD

pfSense® Untangle Sophos Number Of Users 200-3000 200-3000 -- TCP 900 - 968 Mbps TCP 910 - 960 Mbps TCP 920 - 960 Mbps End to End UDP 820 - 900 Mbps UDP 858- 900 Mbps UDP 850- 890 Mbps Bridge TCP 842 - 870 Mbps TCP 840-858 Mbps TCP 840-860 Mbps WAN to LAN UDP 850 - 893 Mbps UDP 850-880 Mbps UDP 850-890 Mbps TCP 889 - 920 Mbps TCP 889-918 Mbps TCP 880-910 Mbps Routed UDP 880 - 960 Mbps UDP 870-950 Mbps UDP 870-950 Mbps TCP 876 - 962 Mbps TCP 880-950 Mbps TCP 890-940 Mbps NAT UDP 910 - 960 Mbps UDP 920-960 Mbps UDP 920-950 Mbps TCP 71 - 88 Mbps TCP 80-88 Mbps TCP 85-89 Mbps AES128 UDP 82 - 97 Mbps UDP 82-97Mbps UDP 84-97Mbps TCP 60 - 75 Mbps TCP 70-82Mbps TCP 75-80Mbps OpenVPN AES256 UDP 70 - 82 Mbps UDP 70-82 Mbps UDP 70-82 Mbps Throughput TCP 85 - 100 Mbps TCP 85-100Mbps TCP 90-100Mbps Blowfish UDP 92 - 110 Mbps UDP 92-110Mbps UDP 90-110Mbps TCP 110 - 115 Mbps TCP 140 -148 Mbps TCP 140 -150 Mbps AES128 UDP 115 - 120 Mbps UDP 115-120Mbps UDP 115-120Mbps TCP 94.4 - 105 Mbps TCP 110-112 Mbps TCP 110-115 Mbps AES256 UDP 100 - 115 Mbps UDP 100-105 Mbps UDP 100-110 Mbps IPSec TCP 110 - 120 Mbps TCP 147-150 Mbps TCP 147-150 Mbps Blowfish128 UDP 115 - 128 Mbps UDP 125-128Mbps UDP 115-128Mbps TCP - 63 - 90 Mbps TCP 63-80 Mbps TCP 70-80 Mbps 3DES UDP - 78 - 103 Mbps UDP 60-82 Mbps UDP 69-82 Mbps TCP - 234 - 267 Mbps TCP 230-260 Mbps TCP 240-260 Mbps L2TP GRE UDP - 263 - 290 Mbps UDP 220-240 Mbps UDP 220-240 Mbps Max Active Connections 1.2 Million * 1.1 Million * 1.1 Million * Max Concurrent Sessions 0.7 Million * 0.8 Million * 0.8 Million * Max New Connections Per Second 40,000 40,000 40,000 Stateful Inspection 1.4 Gbps 1.3 Gbps 1.3 Gbps IPSec Site-To-Site VPN Peers 200 - 600 200 - 600 200 - 600 Transfer - 63 Mbps Transfer - 60 Mbps Transfer - 60 Mbps Basic TCP Unicast Bandwidth - 531 Mbps Bandwidth - 540 Mbps Bandwidth - 550 Mbps Transfer - 220 Mbps Transfer - 60 Mbps Transfer - 60 Mbps Bidirectional Testing Bandwidth - 920 Mbps Bandwidth - 910 Mbps Bandwidth - 900 Mbps Transfer - 111 Mbps Transfer - 120 Mbps Transfer - 120 Mbps Parallel TCP Connections Bandwidth - 918 Mbps Bandwidth - 922 Mbps Bandwidth - 930 Mbps UDP Mode Bandwidth - 824 Mbps Bandwidth - 835 Mbps Bandwidth - 835 Mbps

* These are not theoretical stats, these are real world stats, means generated at the time of full system load. You can consider them a minimum level of the number. You will get more than that in your environment.

Note: Server ports are capable of handling more than 95% of hardware limit, like 950-980Mbps per port. Remember that this is real time hardware performance statistics captured during ideal environment. These might be different according to traffic load, complexity of configuration and processor/memory/storage specifications. Most important OS, if OS is more stable and have smaller footprint then performance should be high.

[email protected] * All specifications and photos are subject to change without notice. United Kingdom Registered names and trademarks are the copyright and property of their respective owners.